Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
File:                     6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json)
Hash identifier:          AoP1egwQSDz2Fiu+julSC2O5qW3w86Q4MNIlqHAiCGk=
Subject key identifier:   25:7A:ED:48:70:4E:70:BA:4C:04:0B:A3:66:70:0E:91:47:8E:07:9D
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Certificate issuer:       /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial:       01967AFB54FCE5923D5C40EBCE574F075FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
Manifest number:          1512
Signing time:             Mon 28 Apr 2025 06:00:13 +0000
Manifest this update:     Mon 28 Apr 2025 06:00:13 +0000
Manifest next update:     Tue 29 Apr 2025 06:00:13 +0000
Files and hashes:         1: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: R61ZbuDlS1SiCQgIYvySho1gDB6bDThTfA3bO9lUlkw=)
                          2: IVdjVoN4btCTyMYmCO02k9GntBE.roa (hash: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:fb:54:fc:e5:92:3d:5c:40:eb:ce:57:4f:07:5f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
        Validity
            Not Before: Apr 28 06:00:13 2025 GMT
            Not After : Apr 29 06:00:13 2025 GMT
        Subject: CN=257aed48704e70ba4c040ba366700e91478e079d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:a2:de:f5:46:a9:e1:3e:ec:a6:66:39:49:
                    67:37:0e:97:3b:e0:35:8e:c4:d4:0c:c3:b0:33:6b:
                    54:f7:0f:59:5f:fb:b6:00:9e:a4:4b:fb:fd:33:1e:
                    d9:92:73:e7:38:73:10:9c:d6:d9:19:67:66:d9:2b:
                    8c:f3:23:b6:6f:b4:23:8b:9d:b5:a0:5b:11:ad:0d:
                    57:95:23:51:c0:cc:f9:5a:d9:eb:8a:62:66:d3:3f:
                    ba:46:9e:8c:8c:c5:be:ad:b5:90:aa:09:44:a7:67:
                    de:b2:a4:ae:86:2e:ce:3f:55:fb:3c:9b:44:aa:29:
                    6b:1f:ff:b7:0b:20:48:50:06:e5:b3:6d:f8:09:f3:
                    90:15:28:b1:12:cc:d6:d2:45:da:ea:37:10:73:34:
                    bf:c9:c3:44:a7:fc:d9:b4:3b:f1:3d:bb:f9:13:38:
                    b5:09:58:48:2a:c2:33:48:dd:4c:af:4c:e6:53:75:
                    18:95:26:f9:8c:80:58:57:f0:0f:14:84:4b:fa:16:
                    db:0a:5c:0a:f3:1c:51:7b:c4:74:1c:da:e7:aa:e4:
                    75:3a:79:89:28:a1:bb:8a:99:10:1e:9e:66:e8:d2:
                    17:2c:95:ee:a2:24:15:7a:d7:91:e1:60:5d:98:c3:
                    6e:70:e0:95:96:a9:0f:ff:46:08:69:5e:ee:ff:4a:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:ED:48:70:4E:70:BA:4C:04:0B:A3:66:70:0E:91:47:8E:07:9D
            X509v3 Authority Key Identifier:
                keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:bd:e0:c7:4c:be:35:11:0d:bf:c8:6a:76:c8:af:87:b2:
         2e:30:3a:60:0b:fd:6e:f9:aa:a9:2f:35:da:e3:62:25:85:c0:
         eb:f9:7b:99:71:bb:23:58:c1:9a:3d:a5:3f:03:1d:4f:7c:75:
         cf:7d:8c:fb:26:70:a7:31:e7:f7:fe:15:58:9b:0d:e3:cb:0f:
         7c:5c:af:d3:bc:81:3f:79:26:23:25:5b:6e:56:85:ef:ff:f4:
         eb:df:e8:6a:68:3a:48:9f:26:c8:83:19:e9:86:3d:20:01:dd:
         05:2a:f3:6a:55:2d:40:36:8b:20:d8:da:7c:cb:18:bc:ef:d1:
         3e:1c:fb:d2:22:ab:ea:a1:98:a2:b3:32:8f:28:42:5d:0a:21:
         ec:2e:6e:96:1b:dd:4d:07:47:a6:52:a4:49:88:d4:37:94:56:
         f3:9d:90:12:30:fa:51:e2:ca:35:3a:cb:fd:da:b4:ea:f9:19:
         11:2a:32:62:54:b2:ea:86:16:1f:8d:49:94:5f:6b:1c:dc:a3:
         76:3f:19:51:30:09:b0:43:4b:5a:77:8d:51:ae:25:cf:54:3c:
         e8:94:6b:8e:ad:76:6d:40:74:ac:7a:c0:09:ea:76:93:68:5f:
         f2:8a:29:dd:6e:56:e1:37:5a:58:9e:be:d4:dc:ae:0a:e5:dd:
         cb:b1:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:54 2025 by rpki-client